Skip to content
yibinericxia edited this page Nov 14, 2021 · 4 revisions

Apply "SameSite"

Add "SameSite=strict" to the cookie and use it in the response header.

CSRF Token

  • Generation:

  • Implementation: Transmit the CSRF token within a hidden field of a form which is submitted via POST

References

Clone this wiki locally